[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256488

 
 

909

 
 

199193

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-3626Date: (C)2009-10-29   (M)2023-12-22


Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression match.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1023077
BID-36812
SECUNIA-37144
OSVDB-59283
ADV-2009-3023
http://www.openwall.com/lists/oss-security/2009/10/23/8
http://perl5.git.perl.org/perl.git/commit/0abd0d78a73da1c4d13b1c700526b7e5d03b32d4
http://rt.perl.org/rt3/Public/Bug/Display.html?id=69973
http://rt.perl.org/rt3/Ticket/Attachment/617489/295383/
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6225
perl-utf8-expressions-dos(53939)

CPE    1
cpe:/a:perl:perl:5.10.1

© SecPod Technologies